Privacy policy

1. Information we collect

• Account information, including your name, email address, authentication records, and account preferences.
• Order information, including cart contents, delivery details, order status, and payment references. Mutapa does not receive or store full card numbers or card security codes.
• Messages and discovery requests you submit, including searches, product preferences, and support correspondence.
• Technical and security information, such as IP address, device and browser information, request logs, and cookie or session identifiers.

2. How we use information

We use personal information to operate and secure the website, authenticate accounts, provide product discovery, maintain carts, process and fulfil orders, communicate about purchases, respond to requests, prevent fraud, comply with legal obligations, and improve reliability. Recommendations use catalog facts and the request you provide.

3. Our grounds for processing

We process information where needed to perform a contract with you, comply with law, pursue legitimate interests such as security and service improvement, or where you have given consent. You may withdraw consent where processing depends on it, without affecting earlier lawful processing.

4. Service providers and sharing

We share only the information needed with providers that support the service, including Supabase for account and application data, Stripe for payment processing, Vercel for website hosting, and relevant delivery or merchant partners for order fulfilment. We may also disclose information where required by law, to protect legal rights, or as part of a business reorganisation. We do not sell personal information.

5. Cookies and sessions

We use essential cookies or similar storage to keep you signed in, maintain security, and provide core website functions. Disabling essential storage may prevent account and checkout features from working. We do not use advertising cookies on this website.

6. Retention and security

We retain information only as long as reasonably needed for the purposes described, including order, tax, dispute, fraud-prevention, and legal recordkeeping requirements. We use access controls, encryption in transit, restricted privileged operations, and payment-provider controls to protect information. No online system can be guaranteed completely secure.

7. International processing

Some service providers may process information outside South Africa. Where this occurs, we use providers and safeguards intended to provide an appropriate level of protection in accordance with applicable data-protection requirements.

8. Your rights

Subject to applicable law, you may ask to access, correct, delete, or restrict use of your personal information; object to certain processing; or request information about recipients. We may need to verify your identity and may retain records where the law requires it. You may also lodge a complaint with South Africa's Information Regulator.

9. Children

The website is not directed to children under 18, and we do not knowingly collect their personal information without appropriate authorisation.

10. Contact and updates

For privacy questions or requests, email privacy@mutapa.co. We may update this policy as the service or legal requirements change. The date above shows the latest revision.